Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/XN_p-sqTTpQdvZdqnomBwUtRNNM.roa
File: XN_p-sqTTpQdvZdqnomBwUtRNNM.roa (raw, json)
Hash identifier: HRB9t7n0E4cKuHQdIQOGsxZo9JNdxIwvrn+lUw1J63U=
Subject key identifier: 5C:DF:E9:FA:CA:93:4E:94:1D:BD:97:6A:9E:89:81:C1:4B:51:34:D3
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019F806E84A017541D6F33336AE84DE208DA
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/XN_p-sqTTpQdvZdqnomBwUtRNNM.roa
Signing time: Mon 20 Jul 2026 16:49:14 +0000
ROA not before: Mon 20 Jul 2026 16:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.133.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.141.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.154.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.182.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1a::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:6e:84:a0:17:54:1d:6f:33:33:6a:e8:4d:e2:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jul 20 16:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cdfe9faca934e941dbd976a9e8981c14b5134d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:d1:c1:2d:09:fe:26:2f:29:08:d8:36:6c:
c9:55:2e:3d:b3:7f:6f:c5:74:7e:69:e9:2f:8c:d8:
69:e3:72:7d:1b:4c:9c:ee:85:6d:e8:14:17:bc:57:
48:91:5e:bf:0e:69:ee:de:6c:c3:9f:34:fa:18:f9:
b2:84:4a:b9:48:17:74:d6:8a:d0:75:2f:d4:86:91:
8b:8e:d8:9e:61:47:3f:19:0c:8c:34:df:ae:aa:3d:
4d:87:9d:a1:78:43:e1:9f:9e:fe:39:4b:96:d1:e8:
b0:46:47:46:81:42:09:94:c4:27:7d:c7:78:f1:57:
ad:2e:74:34:78:70:48:58:19:44:bf:0b:94:f5:fd:
66:7f:60:e4:69:0a:22:75:5b:a0:c1:5b:7c:11:6f:
f2:2c:fc:61:9c:2c:38:5c:c8:17:73:6f:d5:f2:b3:
de:f4:2c:44:18:05:9a:89:dc:ce:4c:8f:d4:0f:a7:
73:b5:71:b7:50:28:c5:48:34:aa:f2:1b:80:08:d4:
b7:1f:e1:56:a3:8e:46:d8:8c:16:1f:8d:0b:ac:be:
af:4e:b8:72:17:31:c0:70:9a:58:37:21:44:85:aa:
6f:3e:7c:ac:9e:a3:27:e3:6b:dd:63:c0:2e:c9:cc:
67:90:95:4b:c1:ca:03:d1:0c:97:f9:fc:cf:ae:3c:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:E9:FA:CA:93:4E:94:1D:BD:97:6A:9E:89:81:C1:4B:51:34:D3
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/XN_p-sqTTpQdvZdqnomBwUtRNNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.133.0-89.252.137.255
89.252.139.0-89.252.141.255
89.252.143.0-89.252.148.255
89.252.150.0/24
89.252.154.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
6e:da:5f:df:d9:d7:b0:cc:68:a0:66:6d:90:38:a7:79:c9:d0:
72:15:76:77:de:db:ed:55:5c:cd:9a:6d:dc:1f:88:bb:8c:49:
d0:0a:db:9c:f5:5a:50:c8:78:88:af:61:4e:a2:cf:42:84:a9:
06:ab:6b:17:9e:57:fc:ca:eb:61:bd:c7:48:b5:10:6f:43:f7:
b3:7d:a8:e1:61:7e:51:e9:8e:5d:7f:ad:6d:cc:a4:da:74:b0:
14:43:cd:c1:16:83:6c:5f:5f:30:da:2e:a9:a3:15:dc:a5:4d:
4b:20:ee:cc:d0:77:1e:cd:77:b0:96:6c:dc:92:14:b9:0c:03:
30:77:61:ee:5b:7b:bc:75:d5:dc:77:9f:d0:f0:f8:37:4b:6d:
61:37:08:8b:2c:4a:4b:6a:56:cf:6a:0e:00:de:5b:6c:35:51:
97:8e:e3:61:db:88:f2:95:ed:9e:a3:5b:cc:40:77:e9:6e:71:
b4:91:01:f1:ff:40:4e:4d:b7:2c:43:3c:d9:35:dd:01:9d:ce:
77:03:c5:3b:a6:88:95:53:1c:a7:3f:8d:46:06:35:b0:e1:d1:
ab:c1:3b:80:1c:96:bd:db:91:a5:1e:9b:78:fe:71:e0:e0:f7:
f1:bb:b0:e2:ea:93:06:71:36:f1:52:60:af:2d:ab:ae:a2:71:
ae:32:4d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:07:49 2026 by rpki-client